Zamieszczam log z hijackthis:
Logfile of HijackThis v1.99.1
Scan saved at 19:31:28, on 2007-06-05
Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\ATKKBService.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
E:\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\Program Files\Wireless 11abg Network Utility\WLService.exe
C:\Program Files\Wireless 11abg Network Utility\WLanCfgAG.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Logitech\iTouch\iTouch.exe
C:\Program Files\Razer\razertra.exe
C:\Program Files\Razer\razerofa.exe
C:\Program Files\Razer\razerhid.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe
C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe
C:\Documents and Settings\Szymek\Pulpit\rapget133\rapget.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\RTHDCPL.EXE
E:\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Gadu-Gadu\gg.exe
C:\Program Files\GetRight\getright.exe
C:\Program Files\Hamachi\hamachi.exe
C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\Szymek\Pulpit\hijackthis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: GetRight IE Download Helper - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - C:\Program Files\GetRight\xx2gr.dll
O2 - BHO: Lch - {5A3700EE-5330-4DE3-A9B6-D9B56E9791F6} - C:\WINDOWS\system32\lch.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: Norton Internet Security 2006 - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {C004A8DA-623A-4409-B6ED-F3E3DA367792} - (no file)
O2 - BHO: (no name) - {D1159422-16E3-462F-A93D-FB718E100407} - (no file)
O3 - Toolbar: Norton Internet Security 2006 - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [razertra] C:\Program Files\Razer\razertra.exe
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [Rapget] C:\Documents and Settings\Szymek\Pulpit\rapget133\rapget.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "E:\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray
O4 - Startup: hamachi.lnk = C:\Program Files\Hamachi\hamachi.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: GetRight - Tray Icon.lnk = C:\Program Files\GetRight\getright.exe
O8 - Extra context menu item: Download with GetRight - C:\Program Files\GetRight\GRdownload.htm
O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Open with GetRight Browser - C:\Program Files\GetRight\GRbrowse.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O20 - Winlogon Notify: efcbbby - efcbbby.dll (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: winrzf32 - winrzf32.dll (file missing)
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
O20 - Winlogon Notify: wudb - C:\WINDOWS\system32\wudb.dll (file missing)
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - E:\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Internet Security Password Validation (ccISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\ccPwdSvc.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Norton Internet Security\comHost.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: WPCA-132AG Wireless PC Card (WPCA-132AG Service) - Unknown owner - C:\Program Files\Wireless 11abg Network Utility\WLService.exe
Oraz log z Silent Runners:
"Szymek" - 2007-06-05 19:38:02 Dodatek Service Pack 2 NTFS
ComboFix 07-06-3 - Running from: "C:\Documents and Settings\Szymek\Pulpit\"
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
C:\Program Files\Common Files\Yazzle1162OinUninstaller.exe
C:\WINDOWS\gc_407.cnf
C:\WINDOWS\gsc_407.cnf
((((((((((((((((((((((((( Files Created from 2007-05-05 to 2007-06-05 )))))))))))))))))))))))))))))))
2007-06-09 13:05 206 --a------ C:\WINDOWS\g1729250.exe
2007-06-09 12:45 206 --a------ C:\WINDOWS\g532875.exe
2007-06-08 23:02 206 --a------ C:\WINDOWS\g13131421.exe
2007-06-08 23:02 <DIR> d-------- C:\DOCUME~1\LOCALS~1\DANEAP~1\Symantec
2007-06-08 22:42 206 --a------ C:\WINDOWS\g11908531.exe
2007-06-08 22:21 206 --a------ C:\WINDOWS\g10638921.exe
2007-06-08 22:00 206 --a------ C:\WINDOWS\g9426781.exe
2007-06-08 21:45 206 --a------ C:\WINDOWS\g8516171.exe
2007-06-08 21:15 206 --a------ C:\WINDOWS\g6726609.exe
2007-06-08 20:54 206 --a------ C:\WINDOWS\g5474187.exe
2007-06-08 20:02 206 --a------ C:\WINDOWS\g2308109.exe
2007-06-08 19:40 206 --a------ C:\WINDOWS\g986000.exe
2007-06-08 19:30 799 ---hs---- C:\WINDOWS\system32\kmllm.ini2
2007-06-08 19:18 143,360 -r------- C:\WINDOWS\system32\RtlCPAPI.dll
2007-06-08 19:16 69,632 -r------- C:\WINDOWS\Alcmtr.exe
2007-06-08 18:48 221,184 --a------ C:\WINDOWS\system32\wmpns.dll
2007-06-08 18:48 206 --a------ C:\WINDOWS\g1351250.exe
2007-06-08 18:28 206 --a------ C:\WINDOWS\g151484.exe
2007-06-06 22:43 206 --a------ C:\WINDOWS\g6427687.exe
2007-06-06 22:14 206 --a------ C:\WINDOWS\g4721843.exe
2007-06-06 21:54 206 --a------ C:\WINDOWS\g3520000.exe
2007-06-06 21:24 206 --a------ C:\WINDOWS\g1716156.exe
2007-06-06 21:00 206 --a------ C:\WINDOWS\g273500.exe
2007-06-06 17:20 <DIR> d-------- C:\Program Files\jv16 PowerTools
2007-06-06 17:11 206 --a------ C:\WINDOWS\g556453.exe
2007-06-06 15:47 206 --a------ C:\WINDOWS\g4468171.exe
2007-06-06 15:24 206 --a------ C:\WINDOWS\g3109312.exe
2007-06-06 15:05 206 --a------ C:\WINDOWS\g1920687.exe
2007-06-06 14:39 206 --a------ C:\WINDOWS\g408921.exe
2007-06-05 22:16 206 --a------ C:\WINDOWS\g27575906.exe
2007-06-05 21:56 206 --a------ C:\WINDOWS\g26372078.exe
2007-06-05 21:06 206 --a------ C:\WINDOWS\g23367125.exe
2007-06-05 19:54 206 --a------ C:\WINDOWS\g19040718.exe
2007-06-05 19:32 206 --a------ C:\WINDOWS\g17713984.exe
2007-06-05 19:10 206 --a------ C:\WINDOWS\g16392312.exe
2007-06-05 18:47 206 --a------ C:\WINDOWS\g15048187.exe
2007-06-05 18:47 <DIR> d-------- C:\WINDOWS\LastGood
2007-06-05 18:28 206 --a------ C:\WINDOWS\g13901718.exe
2007-06-05 16:51 206 --a------ C:\WINDOWS\g8080484.exe
2007-06-05 16:29 206 --a------ C:\WINDOWS\g6753046.exe
2007-06-05 16:07 206 --a------ C:\WINDOWS\g5435109.exe
2007-06-05 15:47 206 --a------ C:\WINDOWS\g4231875.exe
2007-06-05 15:25 206 --a------ C:\WINDOWS\g2914234.exe
2007-06-05 15:03 206 --a------ C:\WINDOWS\g1596390.exe
2007-06-05 14:42 206 --a------ C:\WINDOWS\g344281.exe
2007-06-05 14:18 206 --a------ C:\WINDOWS\g1615218.exe
2007-06-05 14:10 638,481 ---hs---- C:\WINDOWS\system32\kmllm.bak1
2007-06-05 14:04 <DIR> d-------- C:\DOCUME~1\Szymek\DANEAP~1\Hamachi
2007-06-05 14:01 25,544 --a------ C:\WINDOWS\system32\drivers\hamachi.sys
2007-06-05 14:01 <DIR> d-------- C:\Program Files\Hamachi
2007-06-05 13:58 206 --a------ C:\WINDOWS\g374515.exe
2007-06-04 21:40 206 --a------ C:\WINDOWS\g16726796.exe
2007-06-04 21:18 206 --a------ C:\WINDOWS\g15400500.exe
2007-06-04 20:58 206 --a------ C:\WINDOWS\g14198968.exe
2007-06-04 20:13 <DIR> d-------- C:\Program Files\xp-AntiSpy
2007-06-04 20:06 206 --a------ C:\WINDOWS\g11078812.exe
2007-06-04 19:44 206 --a------ C:\WINDOWS\g9758375.exe
2007-06-04 19:24 206 --a------ C:\WINDOWS\g8561640.exe
2007-06-04 19:04 206 --a------ C:\WINDOWS\g7359484.exe
2007-06-04 18:52 <DIR> d-------- C:\Program Files\PremiumSoft
2007-06-04 18:42 206 --a------ C:\WINDOWS\g6037515.exe
2007-06-04 18:19 206 --a------ C:\WINDOWS\g4712796.exe
2007-06-04 17:57 206 --a------ C:\WINDOWS\g3392640.exe
2007-06-04 17:05 206 --a------ C:\WINDOWS\g271593.exe
2007-06-04 16:14 3,968 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2007-06-04 15:38 206 --a------ C:\WINDOWS\g19988187.exe
2007-06-04 15:38 <DIR> d-------- C:\DOCUME~1\LOCALS~1\DANEAP~1\Webroot
2007-06-04 15:29 36,352 --------- C:\WINDOWS\system32\tsgqec.dll
2007-06-04 15:29 288,768 --------- C:\WINDOWS\system32\rhttpaa.dll
2007-06-04 15:29 116,736 --------- C:\WINDOWS\system32\aaclient.dll
2007-06-04 15:29 <DIR> d-------- C:\WINDOWS\system32\pl-pl
2007-06-04 15:28 62,336 --------- C:\WINDOWS\system32\drivers\rspndr.sys
2007-06-04 15:28 10,752 --------- C:\WINDOWS\system32\rspndr.exe
2007-06-04 15:28 <DIR> d-------- C:\WINDOWS\network diagnostic
2007-06-04 15:27 6,144 --------- C:\WINDOWS\system32\kbdpash.dll
2007-06-04 15:27 6,144 --------- C:\WINDOWS\system32\kbdnepr.dll
2007-06-04 15:27 6,144 --------- C:\WINDOWS\system32\kbdiultn.dll
2007-06-04 15:27 6,144 --------- C:\WINDOWS\system32\kbdbhc.dll
2007-06-04 15:27 <DIR> d-------- C:\WINDOWS\ServicePackFiles
2007-06-04 15:24 40,960 --a------ C:\WINDOWS\system32\SSUBTMR6.DLL
2007-06-04 15:24 10,752 --a------ C:\WINDOWS\system32\aamd532.dll
2007-06-04 15:24 <DIR> d-------- C:\WINDOWS\Downloaded Installations
2007-06-04 15:24 <DIR> d-------- C:\Program Files\HighMAT CD Writing Wizard
2007-06-04 15:23 <DIR> d-------- C:\Program Files\AutoPatcher
2007-06-04 15:08 206 --a------ C:\WINDOWS\g18185656.exe
2007-06-04 14:46 206 --a------ C:\WINDOWS\g16865828.exe
2007-06-04 14:24 206 --a------ C:\WINDOWS\g15543437.exe
2007-06-04 14:04 206 --a------ C:\WINDOWS\g14345468.exe
2007-06-04 13:44 206 --a------ C:\WINDOWS\g13148500.exe
2007-06-04 13:22 206 --a------ C:\WINDOWS\g11817687.exe
2007-06-04 13:00 206 --a------ C:\WINDOWS\g10483718.exe
2007-06-04 12:38 206 --a------ C:\WINDOWS\g9185734.exe
2007-06-04 12:16 206 --a------ C:\WINDOWS\g7864359.exe
2007-06-04 11:56 206 --a------ C:\WINDOWS\g6656500.exe
2007-06-04 11:33 206 --a------ C:\WINDOWS\g5310218.exe
2007-06-04 11:12 206 --a------ C:\WINDOWS\g4014687.exe
2007-06-04 10:49 206 --a------ C:\WINDOWS\g2672375.exe
2007-06-04 10:27 206 --a------ C:\WINDOWS\g1351359.exe
2007-06-04 10:08 206 --a------ C:\WINDOWS\g170828.exe
2007-06-04 08:13 206 --a------ C:\WINDOWS\g149109.exe
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
2007-06-08 17:16:01 -------- d-----w C:\Program Files\Realtek
2007-06-08 17:13:09 -------- d-----w C:\Program Files\AvRack
2007-06-05 16:49:23 -------- d-----w C:\Program Files\GetRight
2007-06-05 16:02:42 -------- d-----w C:\Program Files\Common Files\Symantec Shared
2007-06-04 18:16:45 -------- d-----w C:\Program Files\Messenger
2007-06-04 14:49:20 -------- d-----w C:\Program Files\DAEMON Tools
2007-06-04 13:35:57 67,298 ----a-w C:\WINDOWS\system32\perfc015.dat
2007-06-04 13:35:57 436,322 ----a-w C:\WINDOWS\system32\perfh015.dat
2007-06-04 06:23:04 -------- d-----w C:\DOCUME~1\Szymek\DANEAP~1\XnView
2007-05-25 16:01:21 -------- d--h--w C:\Program Files\InstallShield Installation Information
2007-05-13 09:23:46 -------- d-----w C:\Program Files\Symantec
2007-04-30 18:59:38 108,144 ----a-w C:\WINDOWS\system32\CmdLineExt.dll
2007-04-27 17:33:50 -------- d-----w C:\Program Files\Common Files\Blizzard Entertainment
2007-04-27 05:02:10 -------- d-----w C:\Program Files\Azureus
2007-04-26 12:00:56 -------- d-----w C:\DOCUME~1\Szymek\DANEAP~1\Azureus
2007-04-26 06:50:41 -------- d-----w C:\Program Files\BitTorrent
2007-04-26 06:46:10 -------- d-----w C:\DOCUME~1\Szymek\DANEAP~1\BitTorrent
2007-04-23 20:09:44 -------- d-----w C:\Program Files\FlashGet
2007-04-23 17:17:10 -------- d-----w C:\DOCUME~1\Szymek\DANEAP~1\FlashGet
2007-04-22 11:40:15 -------- d-----w C:\Program Files\ChickenInvadersROTYXmasdemo
2007-04-19 18:27:23 -------- d-----w C:\DOCUME~1\Szymek\DANEAP~1\Media Player Classic
2007-04-19 17:14:19 -------- d-----w C:\Program Files\AviSynth 2.5
2007-04-19 17:13:22 -------- d-----w C:\Program Files\eRightSoft
2007-04-19 17:12:48 -------- d-----w C:\Program Files\Real Alternative
2007-04-19 17:12:34 -------- d-----w C:\Program Files\Media Player Classic
2007-04-19 17:12:19 -------- d-----w C:\Program Files\AVIcodec
2007-04-19 13:23:56 -------- d-----w C:\Program Files\Winamp
2007-04-19 13:14:04 -------- d-----w C:\Program Files\SlySoft
2007-04-18 16:14:32 2,854,400 ----a-w C:\WINDOWS\system32\msi.dll
2007-04-17 15:48:09 1,467 ----a-w C:\WINDOWS\mozver.dat
2007-04-16 12:46:26 -------- d-----w C:\Program Files\hp deskjet 3820 series
2007-04-16 12:45:10 -------- d-----w C:\Program Files\Hewlett-Packard
2007-04-13 15:51:37 -------- d-----w C:\Program Files\SubEdit-Player
2007-04-11 14:32:34 -------- d-----w C:\DOCUME~1\Szymek\DANEAP~1\AdobeUM
2007-04-11 12:28:10 86,016 ----a-w C:\WINDOWS\system32\OpenAL32.dll
2007-04-11 12:28:10 262,144 ----a-w C:\WINDOWS\system32\wrap_oal.dll
2007-04-11 06:43:44 1,844,224 ----a-w C:\WINDOWS\system32\win32k.sys
2007-04-10 14:31:41 1 ----a-w C:\WINDOWS\system32\SI.bin
2007-04-10 13:12:27 -------- d-----w C:\DOCUME~1\Szymek\DANEAP~1\Gearbox Software
2007-04-10 11:03:18 -------- d-----w C:\Program Files\Gadu-Gadu
2007-04-10 07:45:10 -------- d-----w C:\Program Files\AGEIA Technologies
2007-04-10 06:33:43 271,360 ----a-w C:\WINDOWS\system32\drivers\atksgt.sys
2007-04-10 06:33:43 18,048 ----a-w C:\WINDOWS\system32\drivers\lirsgt.sys
2007-04-10 06:24:42 639,224 ----a-w C:\WINDOWS\system32\drivers\sptd.sys
2007-04-10 06:16:28 -------- d-----w C:\Program Files\Alcohol Soft
2007-04-10 06:15:26 -------- d-----w C:\Program Files\UltraISO
2007-04-10 06:15:26 -------- d-----w C:\Program Files\Common Files\EZB Systems
2007-04-10 06:13:41 -------- d-----w C:\Program Files\CyberLink
2007-04-10 06:13:16 -------- d-----w C:\Program Files\K-Lite Codec Pack
2007-04-10 06:13:11 -------- d-----w C:\DOCUME~1\Szymek\DANEAP~1\Real
2007-04-10 06:12:41 -------- d-----w C:\Program Files\Vplayer
2007-04-10 06:06:43 -------- d-----w C:\Program Files\Common Files\LightScribe
2007-04-10 06:05:30 -------- d-----w C:\Program Files\Ahead
2007-04-10 06:05:17 -------- d-----w C:\Program Files\Common Files\Ahead
2007-04-10 05:56:27 0 ----a-w C:\WINDOWS\nsreg.dat
2007-04-10 05:47:51 -------- d-----w C:\Program Files\Realtek Sound Manager
2007-04-10 05:42:38 -------- d-----w C:\Program Files\GIGABYTE
2007-04-10 05:38:34 -------- d-----w C:\Program Files\Razer
2007-04-10 05:33:49 81,920 ------r C:\WINDOWS\bwUnin-6.1.4.36-8876480L.exe
2007-04-10 05:33:43 -------- d-----w C:\Program Files\Logitech
2007-04-10 05:32:26 -------- d-----w C:\Program Files\Common Files\Logitech
2007-04-10 05:29:23 -------- d-----w C:\Program Files\Common Files\InstallShield
2007-04-10 05:25:04 -------- d-----w C:\Program Files\Microsoft Works
2007-04-10 05:25:01 -------- d-----w C:\Program Files\MSBuild
2007-04-10 05:18:42 -------- d-----w C:\Program Files\My Company Name
2007-04-09 21:52:03 -------- d-----w C:\Program Files\Common Files\ODBC
2007-04-09 21:52:00 -------- d-----w C:\Program Files\Common Files\SpeechEngines
2007-04-09 20:05:35 -------- d-----w C:\Program Files\microsoft frontpage
2007-04-09 20:05:23 0 --sha-r C:\MSDOS.SYS
2007-04-09 20:05:23 0 --sha-r C:\IO.SYS
2007-04-09 20:05:23 0 ----a-w C:\CONFIG.SYS
2007-04-09 20:05:23 0 ----a-w C:\AUTOEXEC.BAT
2007-04-09 20:04:28 -------- d--h--w C:\Program Files\WindowsUpdate
2007-04-09 20:04:25 -------- d-----w C:\Program Files\Usługi online
2007-04-09 20:03:23 -------- d-----w C:\Program Files\Common Files\MSSoap
2007-04-09 20:03:11 -------- d-----w C:\Program Files\Movie Maker
2007-04-09 20:02:20 21,856 ----a-w C:\WINDOWS\system32\emptyregdb.dat
2007-04-09 20:01:52 -------- d-----w C:\Program Files\MSN Gaming Zone
2007-04-09 20:01:41 -------- d-----w C:\Program Files\Windows NT
2007-03-28 16:51:54 538,256 ----a-w C:\WINDOWS\system32\SymNeti.dll
2007-03-28 16:51:52 161,424 ----a-w C:\WINDOWS\system32\SymRedir.dll
2007-03-17 13:47:17 293,376 ----a-w C:\WINDOWS\system32\winsrv.dll
2007-03-08 15:51:57 579,584 ----a-w C:\WINDOWS\system32\user32.dll
2007-03-08 15:51:57 40,960 ----a-w C:\WINDOWS\system32\mf3216.dll
2007-03-08 15:51:57 282,112 ----a-w C:\WINDOWS\system32\gdi32.dll
2006-05-03 10:06:54 163,328 --sh--r C:\WINDOWS\system32\flvDX.dll
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
*Note* empty entries & legit default entries are not shown
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}=C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2004-12-14 11:56]
{31FF080D-12A3-439A-A2EF-4BA95A3148E8}=C:\Program Files\GetRight\xx2gr.dll [2007-01-04 23:57]
{5A3700EE-5330-4DE3-A9B6-D9B56E9791F6}=C:\WINDOWS\system32\lch.dll [2007-06-08 20:24]
{72853161-30C5-4D22-B7F9-0BBC1D38A37E}=C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 00:48]
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}=C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll [2007-03-14 03:43]
{9ECB9560-04F9-4bbc-943D-298DDF1699E1}=C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll [2005-10-23 01:29]
{A8F38D8D-E480-4D52-B7A2-731BB6995FDD}=C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll [2007-05-23 12:13]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"nwiz"="nwiz.exe" [2006-11-16 17:16 C:\WINDOWS\system32\nwiz.exe]
"GrooveMonitor"="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-27 00:47]
"zBrowser Launcher"="C:\Program Files\Logitech\iTouch\iTouch.exe" [2002-11-23 02:15]
"razertra"="C:\Program Files\Razer\razertra.exe" [2004-10-10 18:21]
"DAEMON Tools"="C:\Program Files\DAEMON Tools\daemon.exe" [2006-11-12 12:48]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe" [2007-03-14 03:43]
"CloneCDTray"="C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" [2006-09-28 21:21]
"Rapget"="C:\Documents and Settings\Szymek\Pulpit\rapget133\rapget.exe" [2007-04-30 23:14]
"RemoteControl"="C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" [2004-11-02 20:24]
"ccApp"="C:\Program Files\Common Files\Symantec Shared\ccApp.exe" [2007-01-22 22:19]
"SkyTel"="SkyTel.EXE" [2006-05-16 12:04 C:\WINDOWS\SkyTel.exe]
"RTHDCPL"="RTHDCPL.EXE" [2006-07-21 10:56 C:\WINDOWS\RTHDCPL.exe]
"Alcmtr"="ALCMTR.EXE" [2005-05-03 12:43 C:\WINDOWS\Alcmtr.exe]
"!AVG Anti-Spyware"="E:\AVG Anti-Spyware 7.5\avgas.exe" [2006-10-07 14:20]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Gadu-Gadu"="C:\Program Files\Gadu-Gadu\gg.exe" [2007-04-10 13:03]
[HKEY_USERS\.default\software\microsoft\windows\currentversion\runonce]
"POSTRBT"=C:\Program Files\Norton Internet Security\Norton AntiVirus\Navw32.exe /REMEDIATE
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"="C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL" [2006-10-27 00:48]
"{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="E:\AVG Anti-Spyware 7.5\shellexecutehook.dll" [2006-09-28 16:13]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\efcbbby]
efcbbby.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\winrzf32]
winrzf32.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\wudb]
C:\WINDOWS\system32\wudb.dll
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost *netsvcs*
*Newly Created Service* - COMHOST
*Newly Created Service* - GTNDIS5
Contents of the 'Scheduled Tasks' folder
2007-06-08 18:04:34 C:\WINDOWS\tasks\Norton AntiVirus - Run Full System Scan - Szymek.job
2007-06-02 22:00:00 C:\WINDOWS\tasks\Zenma Updater.exe.job
**************************************************************************
catchme 0.3.692 W2K/XP/Vista - userland rootkit detector by Gmer, http://www.gmer.net
Rootkit scan 2007-06-05 19:40:01
Windows 5.1.2600 Dodatek Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
Completion time: 2007-06-05 19:40:48
C:\ComboFix-quarantined-files.txt ... 2007-06-05 19:40
--- E O F ---
Proszę o szybką pomoc
Z góry dziękuje.[/quote] 
